FortinetFortinet
NSE4 · Question #561
NSE4 Question #561: Real Exam Question with Answer & Explanation
Sign in or unlock NSE4 to reveal the answer and full explanation for question #561. The question stem and answer options stay visible for context.
Submitted by devops_kid· Apr 18, 2026VPN and Routing
Question
An administrator wants to create a policy-based IPsec VPN tunnel between two FortiGate devices. Which configuration steps must be performed on both units to support this scenario? (Choose three.)
Options
- ADefine the phase 2 parameters.
- BSet the phase 2 encapsulation method to transport mode.
- CDefine at least one firewall policy, with the action set to IPsec.
- DDefine a route to the remote network over the IPsec tunnel.
- EDefine the phase 1 parameters, without enabling IPsec interface mode.
Unlock NSE4 to see the answer
You've previewed enough free NSE4 questions. Unlock NSE4 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#IPsec VPN#Policy-based VPN#FortiGate Configuration#Routing